Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Deniability in Quantum Cryptography

Arash Atashpendar, Peter B. Roenne, Dimiter Ostrev, Peter Y. A. Ryan

Published Jun 14, 2017• 0 citations
OpenAlex

Abstract

This poster describes ongoing work on deniability in quantum cryptography, an area of research that remains almost entirely unexplored in the quantum information processing literature. Deniability is a well-known and fundamental concept in classical cryptography and it can be defined as the ability for the sender of a message to deny the contents of a message or the very act of having participated in an exchange, e.g. having sent the said message. We discuss deniability in the context of quantum key exchange and address a particular problem, first discovered by Donald Beaver, where he claims that all QKD protocols are undeniable. The claim is that while we do get a one-time pad (OTP) using QKD, it does not provide the property of key equivocation as it is expected in the Shannon sense for a OTP. Intuitively, this difficulty lies in the quantum channel alone and it has to do with the fact that in QKD, while we generate entropy by expanding an initially short pre-shared key into an arbitrary longer secret key, we do so by exchanging information over a quantum as well as a classical channel, which could potentially leave a binding transcript of Alice's decisions to the final secret key. This is in contrast with the implicit assumption that Eve knows nothing about how two given parties have established their shared OTP in the first place. We discuss the importance of deniability in cryptography and its wide range of applications, along with cryptographic primitives other than key exchange where deniability might be a desired property. Finally, we present a series of fundamental open questions in this area of research and discuss quantum cryptographic primitives that lend themselves to devising deniable protocols.

Related papers

Vernam's, Kotelnikov's, and Shannon's one-time pad and quantum cryptography

Igor M. Arbekov, S. N. Molotkov

Quantum cryptography Ð quantum key distribution (QKD) Ð was one of the first fields of study of quantum information theory.It reached a mature scientific level and has been implemented in commercial systems for secure quantum communications.The key distribution problem is the central issue of symmetric cryptography.Quantum cryptography solves this problem on the basis of the fundamental laws of nature: the principles of quantum mechanics.Quantum key distribution is essentially matching two independent random sequences on the transmitting and receiving sides by exchanging quantum states.Required in addition to the quantum channel is an authentic classical communication channel.Both communication channels are open and vulnerable to a perpetrator's attack.To ensure the authenticity of the classical channel at initial system startup, a seed key is required, which is used to provide information-theoretic authentication.In essence, quantum cryptography systems are mechanisms for expanding this seed key.Subsequent sessions generate a quantum key, part of which is used for authentication, while another part is employed for other cryptographic purposes, such as encryption.An issue fundamental for quantum cryptography is the number of quantum key distribution sessions that can be conducted from the initial system launch until a new system reboot, when the cryptographic properties of the quantum keys reach a critical level, after which they can no longer be used for cryptographic purposes, and a new system reboot is needed.Although a number of reviews on quantum cryptography are currently available, this issue has not been discussed in detail.It is shown that for realistic parameters of quantum cryptography systems that are currently achievable, a QKD system can operate for I.

Physics-Uspekhi•Jul 1, 2025•2 citations

Cryptography in the quantum world

Claude Crépeau

We survey a number of results concerning transmission of quantum information secretly. First of all, we present the basic concepts of quantum information and the rules guiding it. Then we consider quantum teleportation which is the quantum equivalent of the classical one-time-pad, showing the possibility of transmission of perfectly secret quantum messages as long as the users have exchanged a (quantum) secret key before end of a special Einstein-Podolsky-Rosen type. Then we consider quantum cryptography, a technique used to secretly exchange a cryptographic key using the uncertainty principle to determine the amount of tempering on the communication. We unveil a technique known as entanglement purification that publicly allows amplification of the privacy of a random secret key. Combined with quantum cryptography this technique allows users to exchange EPR particles publicly and purify them after tempering of an adversary in order to transmit secret information through teleportation. Finally, the quantum equivalent of Shamir's secret sharing is presented.

•Jan 20, 2003•1 citation

On Deniability in Quantum Key Exchange

Donald Beaver, Syntechnica Llc

Abstract. We show that claims of “perfect security ” for keys produced by quantum key exchange (QKE) are limited to “privacy ” and “integrity.” Unlike a one-time pad, QKE does not necessarily enable Sender and Receiver to pretend later to have established a different key. This result is puzzling in light of Mayers ’ “No-Go ” theorem showing the impossibility of quantum bit commitment. But even though a simple and intuitive application of Mayers ’ protocol transformation appears sufficient to provide deniability (else QBC would be possible), we show several reasons why such conclusions are ill-founded. Mayers ’ transformation arguments, while sound for QBC, are insufficient to establish deniability in QKE. Having shed light on several unadvertised pitfalls, we then provide a candidate deniable QKE protocol. This itself indicates further shortfalls in current proof techniques, including reductions that preserve privacy but fail to preserve deniability. In sum, purchasing undeniability with an off-the-shelf QKE protocol is significantly more expensive and dangerous than the mere optic fiber for which “perfect security ” is advertised. 1

•Dec 3, 2008•0 citations

Quantum Cryptography

Ahmed Mahmoud Abbas

Quantum cryptography is known the most up-to-date in domain of realistic cryptography notably the menace of quantum cryptanalysis which threatens security firmness of public key cryptography. Quantum cryptography has a famous scheme known as Quantum Key Exchange (QKE), that administrates generation and distribution of a secured random key between legitimate channel users depicted as sender and receiver. Consequently, such key could be used as a key for one-time pad hybrid cryptosystems to encrypt and authenticate messages over a quantum channel. (QKE) is based on unifying quantum physics concepts and information theory with conventional cryptographic schemes that target to produce a short secret session key between any two legitimate parties. An important phase in key creation of BB84 protocol is Privacy Amplification phase where two interconnecting parties distill highly secret shared key from a larger body of shared key, which is only partially secret. The two legitimate parties publicly exchange information to create a compressed key free from biased bits known by an eavesdropper.

Advances in information security, privacy, and ethics book series•May 20, 2016•0 citations

Quantum One-Way Functions and Related Cryptographic Primitives

Georgios M. Nikolopoulos

Quantum cryptographic primitives beyond key distribution remain a less well understood area of research. In classical cryptography, one-way functions underpin nearly all standard cryptographic protocols, motivating the search for meaningful quantum analogues and for a clear understanding of the physical and computational mechanisms that could enforce one-wayness. In this article, we review quantum one-way functions and a range of closely related quantum-state primitives, including one-way state generators, pseudorandom quantum states, and efficiently indistinguishable pairs of states. We discuss both computational and information-theoretic notions of quantum one-wayness, emphasizing the different adversarial models and security assumptions that underlie these constructions. We compare and contrast the various proposed primitives, and clarify their conceptual relationships. Particular emphasis is placed on questions of physical realizability, experimental feasibility, and robustness to noise. Finally, we outline open problems and future directions toward the development of practical quantum cryptographic primitives beyond key distribution, and the emergence of a broader quantum-cryptographic ecosystem.

quant-pharXiv:2608.05754•New Journal of Physics•Aug 7, 2026•0 citations

Quantum Cryptography

Ahmed Mahmoud Abbas

Quantum cryptography is known the most up-to-date in domain of realistic cryptography notably the menace of quantum cryptanalysis which threatens security firmness of public key cryptography. Quantum cryptography has a famous scheme known as Quantum Key Exchange (QKE), that administrates generation and distribution of a secured random key between legitimate channel users depicted as sender and receiver. Consequently, such key could be used as a key for one-time pad hybrid cryptosystems to encrypt and authenticate messages over a quantum channel. (QKE) is based on unifying quantum physics concepts and information theory with conventional cryptographic schemes that target to produce a short secret session key between any two legitimate parties. An important phase in key creation of BB84 protocol is Privacy Amplification phase where two interconnecting parties distill highly secret shared key from a larger body of shared key, which is only partially secret. The two legitimate parties publicly exchange information to create a compressed key free from biased bits known by an eavesdropper.

IGI Global eBooks•Jan 1, 2018•0 citations
This poster describes ongoing work on deniability in quantum cryptography, an area of research that remains almost entirely unexplored in the quantum information processing literature. Deniability is a well-known and fundamental concept in classical cryptography and it can be defined as the ability for the sender of a message to deny the contents of a message or the very act of having participated in an exchange, e.g. having sent the said message. We discuss deniability in the context of quantum key exchange and address a particular problem, first discovered by Donald Beaver, where he claims that all QKD protocols are undeniable. The claim is that while we do get a one-time pad (OTP) using QKD, it does not provide the property of key equivocation as it is expected in the Shannon sense for a OTP. Intuitively, this difficulty lies in the quantum channel alone and it has to do with the fact that in QKD, while we generate entropy by expanding an initially short pre-shared key into an arbitrary longer secret key, we do so by exchanging information over a quantum as well as a classical channel, which could potentially leave a binding transcript of Alice's decisions to the final secret key. This is in contrast with the implicit assumption that Eve knows nothing about how two given parties have established their shared OTP in the first place. We discuss the importance of deniability in cryptography and its wide range of applications, along with cryptographic primitives other than key exchange where deniability might be a desired property. Finally, we present a series of fundamental open questions in this area of research and discuss quantum cryptographic primitives that lend themselves to devising deniable protocols.
Quantum cryptography Ð quantum key distribution (QKD) Ð was one of the first fields of study of quantum information theory.It reached a mature scientific level and has been implemented in commercial systems for secure quantum communications.The key distribution problem is the central issue of symmetric cryptography.Quantum cryptography solves this problem on the basis of the fundamental laws of nature: the principles of quantum mechanics.Quantum key distribution is essentially matching two independent random sequences on the transmitting and receiving sides by exchanging quantum states.Required in addition to the quantum channel is an authentic classical communication channel.Both communication channels are open and vulnerable to a perpetrator's attack.To ensure the authenticity of the classical channel at initial system startup, a seed key is required, which is used to provide information-theoretic authentication.In essence, quantum cryptography systems are mechanisms for expanding this seed key.Subsequent sessions generate a quantum key, part of which is used for authentication, while another part is employed for other cryptographic purposes, such as encryption.An issue fundamental for quantum cryptography is the number of quantum key distribution sessions that can be conducted from the initial system launch until a new system reboot, when the cryptographic properties of the quantum keys reach a critical level, after which they can no longer be used for cryptographic purposes, and a new system reboot is needed.Although a number of reviews on quantum cryptography are currently available, this issue has not been discussed in detail.It is shown that for realistic parameters of quantum cryptography systems that are currently achievable, a QKD system can operate for I.
We survey a number of results concerning transmission of quantum information secretly. First of all, we present the basic concepts of quantum information and the rules guiding it. Then we consider quantum teleportation which is the quantum equivalent of the classical one-time-pad, showing the possibility of transmission of perfectly secret quantum messages as long as the users have exchanged a (quantum) secret key before end of a special Einstein-Podolsky-Rosen type. Then we consider quantum cryptography, a technique used to secretly exchange a cryptographic key using the uncertainty principle to determine the amount of tempering on the communication. We unveil a technique known as entanglement purification that publicly allows amplification of the privacy of a random secret key. Combined with quantum cryptography this technique allows users to exchange EPR particles publicly and purify them after tempering of an adversary in order to transmit secret information through teleportation. Finally, the quantum equivalent of Shamir's secret sharing is presented.
Abstract. We show that claims of “perfect security ” for keys produced by quantum key exchange (QKE) are limited to “privacy ” and “integrity.” Unlike a one-time pad, QKE does not necessarily enable Sender and Receiver to pretend later to have established a different key. This result is puzzling in light of Mayers ’ “No-Go ” theorem showing the impossibility of quantum bit commitment. But even though a simple and intuitive application of Mayers ’ protocol transformation appears sufficient to provide deniability (else QBC would be possible), we show several reasons why such conclusions are ill-founded. Mayers ’ transformation arguments, while sound for QBC, are insufficient to establish deniability in QKE. Having shed light on several unadvertised pitfalls, we then provide a candidate deniable QKE protocol. This itself indicates further shortfalls in current proof techniques, including reductions that preserve privacy but fail to preserve deniability. In sum, purchasing undeniability with an off-the-shelf QKE protocol is significantly more expensive and dangerous than the mere optic fiber for which “perfect security ” is advertised. 1
Quantum cryptography is known the most up-to-date in domain of realistic cryptography notably the menace of quantum cryptanalysis which threatens security firmness of public key cryptography. Quantum cryptography has a famous scheme known as Quantum Key Exchange (QKE), that administrates generation and distribution of a secured random key between legitimate channel users depicted as sender and receiver. Consequently, such key could be used as a key for one-time pad hybrid cryptosystems to encrypt and authenticate messages over a quantum channel. (QKE) is based on unifying quantum physics concepts and information theory with conventional cryptographic schemes that target to produce a short secret session key between any two legitimate parties. An important phase in key creation of BB84 protocol is Privacy Amplification phase where two interconnecting parties distill highly secret shared key from a larger body of shared key, which is only partially secret. The two legitimate parties publicly exchange information to create a compressed key free from biased bits known by an eavesdropper.
Quantum cryptographic primitives beyond key distribution remain a less well understood area of research. In classical cryptography, one-way functions underpin nearly all standard cryptographic protocols, motivating the search for meaningful quantum analogues and for a clear understanding of the physical and computational mechanisms that could enforce one-wayness. In this article, we review quantum one-way functions and a range of closely related quantum-state primitives, including one-way state generators, pseudorandom quantum states, and efficiently indistinguishable pairs of states. We discuss both computational and information-theoretic notions of quantum one-wayness, emphasizing the different adversarial models and security assumptions that underlie these constructions. We compare and contrast the various proposed primitives, and clarify their conceptual relationships. Particular emphasis is placed on questions of physical realizability, experimental feasibility, and robustness to noise. Finally, we outline open problems and future directions toward the development of practical quantum cryptographic primitives beyond key distribution, and the emergence of a broader quantum-cryptographic ecosystem.
Quantum cryptography is known the most up-to-date in domain of realistic cryptography notably the menace of quantum cryptanalysis which threatens security firmness of public key cryptography. Quantum cryptography has a famous scheme known as Quantum Key Exchange (QKE), that administrates generation and distribution of a secured random key between legitimate channel users depicted as sender and receiver. Consequently, such key could be used as a key for one-time pad hybrid cryptosystems to encrypt and authenticate messages over a quantum channel. (QKE) is based on unifying quantum physics concepts and information theory with conventional cryptographic schemes that target to produce a short secret session key between any two legitimate parties. An important phase in key creation of BB84 protocol is Privacy Amplification phase where two interconnecting parties distill highly secret shared key from a larger body of shared key, which is only partially secret. The two legitimate parties publicly exchange information to create a compressed key free from biased bits known by an eavesdropper.